PT-2023-22076 · Unknown · Nfine Rapid Development Platform

Peanut886 + 1 · Publicado 2023-05-25 · Atualizado 2024-05-17 · CVE-2023-2900

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NFine Rapid Development Platform version 20230511

Description A problematic issue has been found, affecting an unknown function of the file /Login/CheckLogin, which leads to the use of a weak hash. This issue can be exploited remotely, but the complexity of an attack is rather high and the exploitability is difficult. The exploit has been disclosed to the public.

Recommendations For NFine Rapid Development Platform version 20230511, consider restricting access to the /Login/CheckLogin file until a fix is available, as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-328

CWE-327

Identificadores relacionados

CVE-2023-2900

Produtos afetados

Nfine Rapid Development Platform

Referências · 5

• 🔥 https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/NFine-Rapid-development-platform-has-weak-password-vulnerability.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-2900 · Aviso do Fabricante
• https://vuldb.com/?ctiid.229974 · Nota
• https://vuldb.com/?id.229974 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-2900 · Nota de Segurança